OpenBSD 6.6 Multiple Authentication Bypass Vulnerabilities

Binary data openbsdauthbypass.nbin...

CVE-2019-19522

creationtimestamp| type| source ---|---|--- 2019-12-05 11:44:38+00:00| published-proof-of-concept| https://t.me/antichat/7241 2019-12-05 12:42:53+00:00| published-proof-of-concept| https://t.me/thehackernews/550 2024-03-07 14:11:58+00:00| seen| https://t.me/ctinow/202414...

OpenBSD Multiple Authentication Vulnerabilities

Multiple authentication vulnerabilities in OpenBSD have been disclosed by Qualys Research Labs. The vulnerabilities are assigned following CVEs: CVE-2019-19522, CVE-2019-19521, CVE-2019-19520, CVE-2019-19519. OpenBSD developers have confirmed the vulnerabilities and also provided a quick response...

Qualys Security Advisory - OpenBSD Authentication Bypass / Privilege Escalation

Qualys Security Advisory Authentication vulnerabilities in OpenBSD ============================================================================== Contents ============================================================================== 1. CVE-2019-19521: Authentication bypass 1.1. Analysis 1.2. Cas...

CVE-2019-19522

OpenBSD 6.6 is affected when S/Key or YubiKey authentication is enabled (non-default). A local attacker in the auth group can escalate to root because root’s file can be written to /etc/skey or /var/db/yubikey and need not be owned by root. This CVE corresponds to CVE-2019-19522. Reported impact ...